Privacy Policy — bjs777

This Privacy Policy ("Policy") describes how bjs777 ("we", "us", "our") collects, processes, stores, and protects the personal data of individuals ("you", "your", "Player") who access or use the bjs777 online betting platform at bjs777.cam (the "Platform"). This Policy is incorporated by reference into bjs777's Terms & Conditions and should be read alongside them.

This Policy applies to all data processing activities carried out by bjs777 in connection with the operation of the Platform, including account registration, identity verification, payment processing, customer support communications, and marketing (where you have given consent). It covers data collected through the bjs777 website, any associated mobile experience, and direct communications between you and our support team.

bjs777 primarily serves English-preference players based in Indonesia. While Indonesian law does not currently have a comprehensive standalone data protection statute equivalent to the EU GDPR, bjs777 voluntarily applies data protection principles consistent with internationally recognised standards, including purpose limitation, data minimisation, storage limitation, and integrity and confidentiality — as a baseline commitment to every Player on the Platform.

For the purposes of this Policy, bjs777 acts as the data controller in respect of all personal data collected from Players and site visitors. As data controller, bjs777 determines the purposes and means of processing your personal data.

All enquiries relating to your personal data — including access requests, correction requests, deletion requests, and complaints — should be directed to our privacy contact above. We aim to acknowledge all data-related requests within five (5) business days and to resolve them within thirty (30) calendar days.

bjs777 collects personal data across several categories, each tied to a specific operational purpose. The table below outlines the categories of personal data we collect, along with representative examples:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, biometric data (beyond ID photo matching for KYC), or health data, unless you voluntarily disclose health-related information in the context of a responsible gaming support request.

bjs777 collects your personal data through the following channels:

• Direct Submission: Information you provide actively when registering an account, completing the KYC process, submitting a deposit or withdrawal request, or contacting our support team.
• Automated Technical Collection: Technical and usage data collected automatically when you access or browse the Platform, using server logs, session tracking, and first-party cookies. See Section 09 for full details on our cookie use.
• Payment Processors: Confirmation data received from our local payment partners (Indonesian banks and e-wallet providers) when a deposit or withdrawal transaction is completed. We receive only the data necessary to reconcile the transaction — we do not receive your full bank account credentials.
• Identity Verification Partners: Where bjs777 uses a third-party KYC or AML screening service to assist with identity verification, that partner may return a verification result and a risk score to bjs777. The underlying document data is processed in accordance with that partner's privacy standards, which bjs777 audits as part of its vendor management process.
• Third-Party Game Providers: Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft may process gameplay data independently within their certified game environments. bjs777 receives aggregated session and outcome data from these providers for the purpose of account reconciliation and responsible gaming monitoring.

bjs777 processes your personal data only where a lawful basis exists. The following table sets out the primary purposes of processing and the corresponding legal basis for each:

Where processing is based on your consent (e.g., promotional emails), you have the right to withdraw that consent at any time by contacting our support team. Withdrawal of consent does not affect the lawfulness of processing carried out before that withdrawal.

bjs777 does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. We may share your personal data with the following categories of recipient, strictly on a need-to-know basis and subject to appropriate data protection obligations:

• Payment Processors: Indonesian bank partners (BCA, BRI, BNI, Mandiri, CIMB Niaga) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) receive the minimum data required to execute your deposit or withdrawal transaction.
• KYC and AML Service Providers: Third-party identity verification and AML screening vendors who assist bjs777 in fulfilling its compliance obligations. These vendors are bound by strict data processing agreements.
• Game Studios and RNG Certification Bodies: Providers such as Pragmatic Play, Evolution Gaming, and other certified studios receive anonymised session identifiers necessary to deliver their games and certify fairness. They do not receive your full identity data.
• IT Infrastructure and Cloud Providers: Hosting, database, and cloud service providers that support the technical operation of the bjs777 Platform, operating under contractual data processing obligations consistent with international security standards.
• Legal and Regulatory Authorities: bjs777 will disclose personal data to law enforcement, regulatory bodies, or courts when required to do so by applicable law, or where we believe disclosure is necessary to protect the rights, property, or safety of bjs777, our Players, or the public.
• Professional Advisors: Legal counsel, auditors, and accountants engaged by bjs777 may access personal data on a confidential basis where necessary to provide their professional services.

bjs777 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law and regulatory obligation. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, bjs777 will securely delete or irreversibly anonymise your personal data. In cases where data must be retained beyond these periods due to an ongoing legal dispute, regulatory investigation, or fraud inquiry, retention will continue for the duration of that proceeding.

bjs777 implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. Our core security infrastructure includes:

• 256-Bit SSL/TLS Encryption: All data exchanged between your device and our servers is encrypted in transit using 256-bit SSL/TLS. The bjs777 domain operates exclusively over HTTPS — unencrypted HTTP connections are automatically redirected.
• Data Encryption at Rest: Sensitive data stored in our databases — including KYC documents, financial records, and identity data — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data within bjs777's internal systems is restricted on a strict need-to-know basis. All staff with data access are bound by confidentiality obligations and undergo regular security awareness training.
• Two-Factor Authentication (2FA): bjs777 offers and strongly recommends two-factor authentication for all Player accounts as an additional layer of protection against unauthorised login.
• Penetration Testing: bjs777's Platform undergoes periodic independent security assessments, including penetration testing, to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: In the event of a personal data breach that poses a risk to your rights and freedoms, bjs777 will notify affected Players without undue delay and take immediate remedial action to contain and investigate the breach.

While bjs777 applies industry-leading security practices, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account password and for ensuring that your device is protected by up-to-date security software.

bjs777 uses a minimal set of cookies and similar technologies to ensure the Platform functions correctly and to understand how Players interact with the site. We do not use third-party advertising cookies or cross-site behavioural tracking.

You can control cookie behaviour through your browser settings. Blocking required/security cookies may affect the functionality of your account. Blocking preference and analytics cookies will not prevent you from using the Platform but may result in a reduced personalisation experience.

As a Player on the bjs777 Platform, you have the following rights in relation to your personal data. To exercise any of these rights, contact us at [email protected].

• Right of Access: You may request a copy of the personal data bjs777 holds about you, along with information about how it is used and with whom it is shared.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it without undue delay.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where we no longer have a lawful basis to retain it. This right is subject to our legal retention obligations — for example, KYC and financial records that must be kept for regulatory compliance purposes cannot be immediately erased.
• Right to Restriction of Processing: You may request that we restrict the processing of your personal data in certain circumstances, such as while a correction request is being investigated.
• Right to Data Portability: Where processing is based on your consent or on the performance of a contract and is carried out by automated means, you may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interests, including direct marketing. Where you object to marketing communications, we will stop processing for that purpose immediately.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time. This does not affect the legality of prior processing.
• Right to Lodge a Complaint: If you believe bjs777 has handled your personal data improperly, you have the right to raise the matter with a competent supervisory authority in your jurisdiction, or directly with us before doing so.

We will respond to all data rights requests within thirty (30) calendar days. Where a request is complex or we have received a high volume of requests, we may extend this period by a further thirty (30) days, in which case we will notify you of the extension.

As part of our KYC process, bjs777 verifies the age of every registered Player using government-issued identity documentation. This age verification step is mandatory and cannot be bypassed. If we discover, at any point, that a Player under the age of 21 has registered an account — whether through underage misrepresentation or any other means — we will take the following steps:

• Immediately suspend the account and freeze all associated funds.
• Reverse any deposits made to the account to the original payment method where technically possible.
• Notify the relevant authorities if required by applicable law.
• Permanently ban the associated device, email address, and payment methods from the Platform.

If you are a parent or guardian and have reason to believe that a minor in your care has accessed the bjs777 Platform, please contact us immediately at [email protected] so we can investigate and take appropriate action.

bjs777 operates as an internationally regulated platform. In the course of our operations, your personal data may be transferred to and processed in jurisdictions outside Indonesia. This may occur, for example, when data is processed by our cloud infrastructure provider or by a game studio's certified gaming server.

Whenever personal data is transferred internationally, bjs777 ensures that appropriate safeguards are in place to protect it. These safeguards include contractual protections (data processing agreements with standard contractual clauses), and a requirement that all international recipients implement security measures at least equivalent to those applied by bjs777 itself.

Where a transfer is to a jurisdiction that does not offer an equivalent level of data protection to international standards, bjs777 will only proceed with the transfer where a specific derogation applies — for example, where the transfer is strictly necessary for the performance of your account contract, or where you have given explicit consent.

bjs777 reserves the right to update or amend this Privacy Policy at any time. When we make material changes — for example, changes to the categories of data we collect, new sharing arrangements with third parties, or changes to your rights — we will notify registered Players by email to the address on record, and will update the "Last Updated" date at the top of this page.

Non-material changes (such as clarifications to existing practices, corrections of typographical errors, or restructuring of sections for improved readability) may be made without individual notification, though the "Last Updated" date will always reflect the most recent revision.

Your continued use of the bjs777 Platform following the publication of any amended Privacy Policy constitutes your acknowledgement of, and agreement to, the updated terms. If you object to any change, you must cease using the Platform and may request account closure by contacting our support team.

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by bjs777, please contact our dedicated privacy support team using the details below. As noted throughout this Policy, please be aware that the email address is provided as plain text and is not a clickable link — copy and paste it into your email client to reach us.